@xemahq/authorization-internal-api-client 0.3.10 → 0.4.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. package/dist/custom-fetch.d.ts +22 -0
  2. package/dist/custom-fetch.js +27 -0
  3. package/dist/endpoints/environments/environments.d.ts +23 -2
  4. package/dist/endpoints/environments/environments.js +118 -2
  5. package/dist/endpoints/org-erasure/org-erasure.d.ts +5 -0
  6. package/dist/endpoints/org-erasure/org-erasure.js +23 -0
  7. package/dist/endpoints/output-routes/output-routes.d.ts +41 -0
  8. package/dist/endpoints/output-routes/output-routes.js +133 -0
  9. package/dist/endpoints/resource-revisions/resource-revisions.d.ts +16 -0
  10. package/dist/endpoints/resource-revisions/resource-revisions.js +36 -0
  11. package/dist/index.d.ts +3 -0
  12. package/dist/index.js +3 -0
  13. package/dist/models/addResourceShareDto.d.ts +4 -1
  14. package/dist/models/addRoleGrantDto.d.ts +0 -1
  15. package/dist/models/capabilityEffectClass.d.ts +11 -0
  16. package/dist/models/capabilityEffectClass.js +13 -0
  17. package/dist/models/capabilityGrantDto.d.ts +0 -1
  18. package/dist/models/capabilityReach.d.ts +14 -0
  19. package/dist/models/capabilityReach.js +13 -0
  20. package/dist/models/createGrantDto.d.ts +0 -2
  21. package/dist/models/credentialDefaultDto.d.ts +2 -0
  22. package/dist/models/credentialDefaultsControllerDeleteParams.d.ts +4 -0
  23. package/dist/models/credentialDefaultsControllerGetParams.d.ts +4 -0
  24. package/dist/models/dataResidency.d.ts +0 -2
  25. package/dist/models/dataResidency.js +0 -2
  26. package/dist/models/environmentCeilingSource.d.ts +1 -1
  27. package/dist/models/environmentsControllerReleaseHistoryParams.d.ts +9 -0
  28. package/dist/models/environmentsControllerReleaseHistoryParams.js +7 -0
  29. package/dist/models/environmentsControllerReleaseImpactParams.d.ts +9 -0
  30. package/dist/models/environmentsControllerReleaseImpactParams.js +7 -0
  31. package/dist/models/environmentsControllerRollbackParams.d.ts +8 -0
  32. package/dist/models/environmentsControllerRollbackParams.js +7 -0
  33. package/dist/models/exactResourceAuthorityDto.d.ts +21 -0
  34. package/dist/models/exactResourceAuthorityDto.js +2 -0
  35. package/dist/models/exactResourceAuthorityDtoDataEnvelope.d.ts +9 -0
  36. package/dist/models/exactResourceAuthorityDtoDataEnvelope.js +2 -0
  37. package/dist/models/exactResourceBindingDto.d.ts +11 -0
  38. package/dist/models/exactResourceBindingDto.js +7 -0
  39. package/dist/models/executionEnvironmentReleaseHistoryDto.d.ts +19 -0
  40. package/dist/models/executionEnvironmentReleaseHistoryDto.js +2 -0
  41. package/dist/models/executionEnvironmentReleaseHistoryDtoDataArrayEnvelope.d.ts +9 -0
  42. package/dist/models/executionEnvironmentReleaseHistoryDtoDataArrayEnvelope.js +2 -0
  43. package/dist/models/executionEnvironmentReleaseHistoryDtoOperation.d.ts +11 -0
  44. package/dist/models/executionEnvironmentReleaseHistoryDtoOperation.js +13 -0
  45. package/dist/models/executionEnvironmentReleaseImpactDto.d.ts +14 -0
  46. package/dist/models/executionEnvironmentReleaseImpactDto.js +7 -0
  47. package/dist/models/executionEnvironmentReleaseImpactDtoDataArrayEnvelope.d.ts +9 -0
  48. package/dist/models/executionEnvironmentReleaseImpactDtoDataArrayEnvelope.js +2 -0
  49. package/dist/models/executionEnvironmentResponseDto.d.ts +20 -2
  50. package/dist/models/executionEnvironmentResponseDtoAllowedBiomesItem.d.ts +8 -0
  51. package/dist/models/executionEnvironmentResponseDtoAllowedBiomesItem.js +7 -0
  52. package/dist/models/executionEnvironmentResponseDtoAllowedConnectorsItem.d.ts +8 -0
  53. package/dist/models/executionEnvironmentResponseDtoAllowedConnectorsItem.js +7 -0
  54. package/dist/models/executionEnvironmentResponseDtoAllowedKnowledgeScopesItem.d.ts +8 -0
  55. package/dist/models/executionEnvironmentResponseDtoAllowedKnowledgeScopesItem.js +7 -0
  56. package/dist/models/executionEnvironmentResponseDtoAllowedMountsItem.d.ts +8 -0
  57. package/dist/models/executionEnvironmentResponseDtoAllowedMountsItem.js +7 -0
  58. package/dist/models/executionEnvironmentResponseDtoOrgId.d.ts +1 -1
  59. package/dist/models/impactedOutputRouteConsumerDto.d.ts +16 -0
  60. package/dist/models/impactedOutputRouteConsumerDto.js +7 -0
  61. package/dist/models/impactedOutputRouteConsumerDtoDataArrayEnvelope.d.ts +9 -0
  62. package/dist/models/impactedOutputRouteConsumerDtoDataArrayEnvelope.js +2 -0
  63. package/dist/models/index.d.ts +49 -0
  64. package/dist/models/index.js +49 -0
  65. package/dist/models/object.d.ts +8 -0
  66. package/dist/models/object.js +7 -0
  67. package/dist/models/outputRouteAuthorityDto.d.ts +29 -0
  68. package/dist/models/outputRouteAuthorityDto.js +2 -0
  69. package/dist/models/outputRouteAuthorityDtoAllowedOutputSchema.d.ts +11 -0
  70. package/dist/models/outputRouteAuthorityDtoAllowedOutputSchema.js +7 -0
  71. package/dist/models/outputRouteAuthorityDtoDataEnvelope.d.ts +9 -0
  72. package/dist/models/outputRouteAuthorityDtoDataEnvelope.js +2 -0
  73. package/dist/models/outputRouteDestinationKind.d.ts +12 -0
  74. package/dist/models/outputRouteDestinationKind.js +14 -0
  75. package/dist/models/outputRoutePublicationRequestDto.d.ts +11 -0
  76. package/dist/models/outputRoutePublicationRequestDto.js +2 -0
  77. package/dist/models/outputRoutePublicationRequestDtoDataEnvelope.d.ts +9 -0
  78. package/dist/models/outputRoutePublicationRequestDtoDataEnvelope.js +2 -0
  79. package/dist/models/outputRouteReleaseHistoryDto.d.ts +24 -0
  80. package/dist/models/outputRouteReleaseHistoryDto.js +2 -0
  81. package/dist/models/outputRouteReleaseHistoryDtoDataArrayEnvelope.d.ts +9 -0
  82. package/dist/models/outputRouteReleaseHistoryDtoDataArrayEnvelope.js +2 -0
  83. package/dist/models/outputRouteReleaseHistoryDtoOperation.d.ts +11 -0
  84. package/dist/models/outputRouteReleaseHistoryDtoOperation.js +13 -0
  85. package/dist/models/outputRouteReleaseRequestDto.d.ts +17 -0
  86. package/dist/models/outputRouteReleaseRequestDto.js +2 -0
  87. package/dist/models/outputRouteReleaseRequestDtoDataEnvelope.d.ts +9 -0
  88. package/dist/models/outputRouteReleaseRequestDtoDataEnvelope.js +2 -0
  89. package/dist/models/outputRouteReleaseRequestDtoStatus.d.ts +11 -0
  90. package/dist/models/outputRouteReleaseRequestDtoStatus.js +13 -0
  91. package/dist/models/outputRouteRevisionDto.d.ts +27 -0
  92. package/dist/models/outputRouteRevisionDto.js +2 -0
  93. package/dist/models/outputRouteRevisionDtoAllowedOutputSchema.d.ts +11 -0
  94. package/dist/models/outputRouteRevisionDtoAllowedOutputSchema.js +7 -0
  95. package/dist/models/outputRouteRevisionsControllerReleaseHistoryParams.d.ts +13 -0
  96. package/dist/models/outputRouteRevisionsControllerReleaseHistoryParams.js +2 -0
  97. package/dist/models/policyResourceDto.d.ts +1 -1
  98. package/dist/models/previewOutputRouteImpactDto.d.ts +10 -0
  99. package/dist/models/previewOutputRouteImpactDto.js +7 -0
  100. package/dist/models/registerResourceOwnershipDto.d.ts +3 -2
  101. package/dist/models/registerResourceRevisionDto.d.ts +17 -0
  102. package/dist/models/registerResourceRevisionDto.js +2 -0
  103. package/dist/models/registeredResourceRevisionDto.d.ts +19 -0
  104. package/dist/models/registeredResourceRevisionDto.js +2 -0
  105. package/dist/models/registeredResourceRevisionDtoDataEnvelope.d.ts +9 -0
  106. package/dist/models/registeredResourceRevisionDtoDataEnvelope.js +2 -0
  107. package/dist/models/replaceResourceOwnershipDto.d.ts +3 -2
  108. package/dist/models/requestOutputRouteRetirementDto.d.ts +16 -0
  109. package/dist/models/requestOutputRouteRetirementDto.js +7 -0
  110. package/dist/models/requestOutputRouteRevisionReleaseDto.d.ts +31 -0
  111. package/dist/models/requestOutputRouteRevisionReleaseDto.js +2 -0
  112. package/dist/models/requestOutputRouteRevisionReleaseDtoAllowedOutputSchema.d.ts +11 -0
  113. package/dist/models/requestOutputRouteRevisionReleaseDtoAllowedOutputSchema.js +7 -0
  114. package/dist/models/requestOutputRouteRollbackDto.d.ts +17 -0
  115. package/dist/models/requestOutputRouteRollbackDto.js +7 -0
  116. package/dist/models/resolveExactOutputRouteDto.d.ts +10 -0
  117. package/dist/models/resolveExactOutputRouteDto.js +2 -0
  118. package/dist/models/resolveExactResourceRevisionDto.d.ts +11 -0
  119. package/dist/models/resolveExactResourceRevisionDto.js +2 -0
  120. package/dist/models/resolveOutputRouteChannelDto.d.ts +12 -0
  121. package/dist/models/resolveOutputRouteChannelDto.js +2 -0
  122. package/dist/models/resourceOwnershipEntryDto.d.ts +6 -0
  123. package/dist/models/resourceOwnershipReadDto.d.ts +5 -3
  124. package/dist/models/resourceShareRefDto.d.ts +15 -0
  125. package/dist/models/resourceShareRefDto.js +2 -0
  126. package/dist/models/resourceSubjectAccessResult.d.ts +10 -0
  127. package/dist/models/resourceSubjectAccessResult.js +12 -0
  128. package/dist/models/roleGrantDto.d.ts +0 -1
  129. package/dist/models/rollbackExecutionEnvironmentDto.d.ts +11 -0
  130. package/dist/models/rollbackExecutionEnvironmentDto.js +7 -0
  131. package/dist/models/updateGrantDto.d.ts +0 -1
  132. package/dist/models/upsertCredentialDefaultDto.d.ts +2 -0
  133. package/dist/models/xemaObjectKind.d.ts +2 -2
  134. package/dist/models/xemaObjectKind.js +2 -2
  135. package/package.json +2 -2
@@ -13,8 +13,6 @@ export interface CreateGrantDto {
13
13
  subjectRef: string;
14
14
  /** Canonical CapabilityRef from `@xemahq/kernel-contracts/capability`. */
15
15
  capability: string;
16
- /** Resource-scope glob for this grant. STORED ONLY — it is part of the grant uniqueness key and nothing in the decision path reads it, so a value narrower than `**` grants exactly what `**` grants today and must not be relied on to restrict anything. The vocabulary it will be matched against is deliberately NOT specified: instance refs are the canonical `resource:<type>:<id>` (see `PolicyResourceDto.ref`), and whether this glob matches those or a different addressing scheme is the decision of the phase that makes it enforceable. It previously advertised `xema://orgs/acme/projects/support/kb/**` — an XVFS path form the platform rejects wherever it IS parsed, and that stale vocabulary is what led five producers to send refs the PDP refuses. */
17
- resourceGlob?: string;
18
16
  /** Built-in environment slug. Phase 3 stores but does not enforce. */
19
17
  environment: string;
20
18
  constraints?: GrantConstraintsDto;
@@ -12,6 +12,8 @@ export interface CredentialDefaultDto {
12
12
  * @nullable
13
13
  */
14
14
  projectId?: string | null;
15
+ /** The external provider this default is for. */
16
+ provider: string;
15
17
  /** Opaque credential-binding pointer. Not a secret. */
16
18
  credentialBindingId: string;
17
19
  createdAt: string;
@@ -12,4 +12,8 @@ export type CredentialDefaultsControllerDeleteParams = {
12
12
  * Project identifier. Omit for the ORG-wide default; set for a per-project default.
13
13
  */
14
14
  projectId?: string;
15
+ /**
16
+ * The external provider whose default is being addressed. Required: a default is per (scope, provider), so a scope alone does not name one.
17
+ */
18
+ provider: string;
15
19
  };
@@ -12,4 +12,8 @@ export type CredentialDefaultsControllerGetParams = {
12
12
  * Project identifier. Omit for the ORG-wide default; set for a per-project default.
13
13
  */
14
14
  projectId?: string;
15
+ /**
16
+ * The external provider whose default is being addressed. Required: a default is per (scope, provider), so a scope alone does not name one.
17
+ */
18
+ provider: string;
15
19
  };
@@ -5,7 +5,5 @@
5
5
  */
6
6
  export type DataResidency = typeof DataResidency[keyof typeof DataResidency];
7
7
  export declare const DataResidency: {
8
- readonly eu: "eu";
9
- readonly us: "us";
10
8
  readonly 'customer-private': "customer-private";
11
9
  };
@@ -7,7 +7,5 @@
7
7
  Object.defineProperty(exports, "__esModule", { value: true });
8
8
  exports.DataResidency = void 0;
9
9
  exports.DataResidency = {
10
- eu: 'eu',
11
- us: 'us',
12
10
  'customer-private': 'customer-private',
13
11
  };
@@ -4,7 +4,7 @@
4
4
  * OpenAPI spec version: 0.1.1
5
5
  */
6
6
  /**
7
- * WHICH row set `maxDataClassification`: the kernel-seeded global row (`platform-built-in`), this org's override of it (`org-override`), or an org-custom environment's own column (`org-custom-environment`). An override that the installation ceiling already swallowed reads as `platform-built-in`, because it is deciding nothing.
7
+ * WHICH generic release authority set `maxDataClassification`: the global `default` channel (`platform-built-in`), this org's `tenant` channel restriction (`org-override`), or an org-custom Environment's `stable` publication (`org-custom-environment`). A tenant restriction that the installation ceiling already swallowed reads as `platform-built-in`, because it is deciding nothing.
8
8
  */
9
9
  export type EnvironmentCeilingSource = typeof EnvironmentCeilingSource[keyof typeof EnvironmentCeilingSource];
10
10
  export declare const EnvironmentCeilingSource: {
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type EnvironmentsControllerReleaseHistoryParams = {
7
+ tenantOverride?: boolean;
8
+ orgId?: unknown;
9
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type EnvironmentsControllerReleaseImpactParams = {
7
+ tenantOverride?: boolean;
8
+ orgId?: unknown;
9
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type EnvironmentsControllerRollbackParams = {
7
+ orgId?: unknown;
8
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,21 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { DataClassification } from './dataClassification.js';
7
+ import type { ResourceSubjectAccessResult } from './resourceSubjectAccessResult.js';
8
+ export interface ExactResourceAuthorityDto {
9
+ /** Canonical version-pinned Xema Resource ref. The first slug segment is the registered resource kind. */
10
+ ref: string;
11
+ /** Lowercase SHA-256 of the immutable revision metadata. */
12
+ contentHash: string;
13
+ orgId: string;
14
+ resourceType: string;
15
+ resourceId: string;
16
+ version: string;
17
+ ownerSpaceKey: string;
18
+ classification: DataClassification;
19
+ decisionCapabilityRef: string;
20
+ access: ResourceSubjectAccessResult;
21
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { ExactResourceAuthorityDto } from './exactResourceAuthorityDto.js';
7
+ export interface ExactResourceAuthorityDtoDataEnvelope {
8
+ data: ExactResourceAuthorityDto;
9
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,11 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export interface ExactResourceBindingDto {
7
+ /** Canonical version-pinned Xema Resource ref. The first slug segment is the registered resource kind. */
8
+ ref: string;
9
+ /** Lowercase SHA-256 of the immutable revision metadata. */
10
+ contentHash: string;
11
+ }
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,19 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { ExecutionEnvironmentReleaseHistoryDtoOperation } from './executionEnvironmentReleaseHistoryDtoOperation.js';
7
+ export interface ExecutionEnvironmentReleaseHistoryDto {
8
+ releaseSetId: string;
9
+ operation: ExecutionEnvironmentReleaseHistoryDtoOperation;
10
+ rollbackOfReleaseSetId?: string;
11
+ revisionId: string;
12
+ /** @pattern ^[a-f0-9]{64}$ */
13
+ contentHash: string;
14
+ channel: string;
15
+ channelVersion: number;
16
+ retired: boolean;
17
+ reason: string;
18
+ createdAt: string;
19
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { ExecutionEnvironmentReleaseHistoryDto } from './executionEnvironmentReleaseHistoryDto.js';
7
+ export interface ExecutionEnvironmentReleaseHistoryDtoDataArrayEnvelope {
8
+ data: ExecutionEnvironmentReleaseHistoryDto[];
9
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,11 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type ExecutionEnvironmentReleaseHistoryDtoOperation = typeof ExecutionEnvironmentReleaseHistoryDtoOperation[keyof typeof ExecutionEnvironmentReleaseHistoryDtoOperation];
7
+ export declare const ExecutionEnvironmentReleaseHistoryDtoOperation: {
8
+ readonly promote: "promote";
9
+ readonly rollback: "rollback";
10
+ readonly retire: "retire";
11
+ };
@@ -0,0 +1,13 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
8
+ exports.ExecutionEnvironmentReleaseHistoryDtoOperation = void 0;
9
+ exports.ExecutionEnvironmentReleaseHistoryDtoOperation = {
10
+ promote: 'promote',
11
+ rollback: 'rollback',
12
+ retire: 'retire',
13
+ };
@@ -0,0 +1,14 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export interface ExecutionEnvironmentReleaseImpactDto {
7
+ resourceKind: string;
8
+ resourceId: string;
9
+ revisionId: string;
10
+ /** @pattern ^[a-f0-9]{64}$ */
11
+ contentHash: string;
12
+ /** @minimum 0 */
13
+ depth: number;
14
+ }
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { ExecutionEnvironmentReleaseImpactDto } from './executionEnvironmentReleaseImpactDto.js';
7
+ export interface ExecutionEnvironmentReleaseImpactDtoDataArrayEnvelope {
8
+ data: ExecutionEnvironmentReleaseImpactDto[];
9
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -3,17 +3,29 @@
3
3
  * Authorization API
4
4
  * OpenAPI spec version: 0.1.1
5
5
  */
6
+ import type { CapabilityReach } from './capabilityReach.js';
6
7
  import type { DataClassification } from './dataClassification.js';
7
8
  import type { EnvironmentCeilingSource } from './environmentCeilingSource.js';
8
9
  import type { ExecutionEnvironmentKind } from './executionEnvironmentKind.js';
10
+ import type { ExecutionEnvironmentResponseDtoAllowedBiomesItem } from './executionEnvironmentResponseDtoAllowedBiomesItem.js';
9
11
  import type { ExecutionEnvironmentResponseDtoAllowedCapabilitiesItem } from './executionEnvironmentResponseDtoAllowedCapabilitiesItem.js';
12
+ import type { ExecutionEnvironmentResponseDtoAllowedConnectorsItem } from './executionEnvironmentResponseDtoAllowedConnectorsItem.js';
13
+ import type { ExecutionEnvironmentResponseDtoAllowedKnowledgeScopesItem } from './executionEnvironmentResponseDtoAllowedKnowledgeScopesItem.js';
14
+ import type { ExecutionEnvironmentResponseDtoAllowedMountsItem } from './executionEnvironmentResponseDtoAllowedMountsItem.js';
10
15
  import type { ExecutionEnvironmentResponseDtoApprovalRulesItem } from './executionEnvironmentResponseDtoApprovalRulesItem.js';
11
16
  import type { ExecutionEnvironmentResponseDtoOrgId } from './executionEnvironmentResponseDtoOrgId.js';
12
17
  import type { ExecutionEnvironmentResponseDtoRuntimeLimits } from './executionEnvironmentResponseDtoRuntimeLimits.js';
13
18
  export interface ExecutionEnvironmentResponseDto {
14
19
  id: string;
20
+ /** Immutable policy publication identifier. */
21
+ revisionId: string;
15
22
  /**
16
- * Owning organization. `null` for kernel-seeded built-in environments (global); set for org-custom environments.
23
+ * Domain-separated SHA-256 of the complete canonical Environment content.
24
+ * @pattern ^[a-f0-9]{64}$
25
+ */
26
+ contentHash: string;
27
+ /**
28
+ * Identity owner on catalogue reads; immutable publication owner on exact-authority reads. `null` denotes the global built-in publication.
17
29
  * @nullable
18
30
  */
19
31
  orgId?: ExecutionEnvironmentResponseDtoOrgId;
@@ -21,6 +33,8 @@ export interface ExecutionEnvironmentResponseDto {
21
33
  slug: string;
22
34
  /** Kebab-case ExecutionEnvironmentKind classification (`system` | `org` | `project` | `app` | `session` | `sandbox` | `public` | `store-review` | `trusted-dev`). Equals `slug` for built-ins. */
23
35
  kind: ExecutionEnvironmentKind;
36
+ /** Canonical capability reach ceiling derived from `kind`. */
37
+ reachCeiling: CapabilityReach;
24
38
  /** Canonical `environment:<slug>` reference (ExecutionEnvironmentRef). */
25
39
  ref: string;
26
40
  description: string;
@@ -28,6 +42,10 @@ export interface ExecutionEnvironmentResponseDto {
28
42
  isBuiltIn: boolean;
29
43
  /** Per-environment capability allow-list (`CapabilityPolicy[]` from the kernel contracts). Empty `[]` for v1 built-ins. */
30
44
  allowedCapabilities: ExecutionEnvironmentResponseDtoAllowedCapabilitiesItem[];
45
+ allowedKnowledgeScopes: ExecutionEnvironmentResponseDtoAllowedKnowledgeScopesItem[];
46
+ allowedConnectors: ExecutionEnvironmentResponseDtoAllowedConnectorsItem[];
47
+ allowedBiomes: ExecutionEnvironmentResponseDtoAllowedBiomesItem[];
48
+ allowedMounts: ExecutionEnvironmentResponseDtoAllowedMountsItem[];
31
49
  /** Approval rules (`ApprovalRule[]` from the kernel contracts). */
32
50
  approvalRules: ExecutionEnvironmentResponseDtoApprovalRulesItem[];
33
51
  /** Runtime limits (`RuntimeLimits` from the kernel contracts). */
@@ -36,7 +54,7 @@ export interface ExecutionEnvironmentResponseDto {
36
54
  maxDataClassification: DataClassification;
37
55
  /** The INSTALLATION-wide ceiling for this environment, before any organisation override. Equal to `maxDataClassification` whenever no override is in force. Present so a screen can say "your org lowered this" rather than showing one number and leaving the reader to guess who set it. */
38
56
  platformMaxDataClassification: DataClassification;
39
- /** WHICH row set `maxDataClassification`: the kernel-seeded global row (`platform-built-in`), this org's override of it (`org-override`), or an org-custom environment's own column (`org-custom-environment`). An override that the installation ceiling already swallowed reads as `platform-built-in`, because it is deciding nothing. */
57
+ /** WHICH generic release authority set `maxDataClassification`: the global `default` channel (`platform-built-in`), this org's `tenant` channel restriction (`org-override`), or an org-custom Environment's `stable` publication (`org-custom-environment`). A tenant restriction that the installation ceiling already swallowed reads as `platform-built-in`, because it is deciding nothing. */
40
58
  dataCeilingSource: EnvironmentCeilingSource;
41
59
  createdAt: string;
42
60
  updatedAt: string;
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type ExecutionEnvironmentResponseDtoAllowedBiomesItem = {
7
+ [key: string]: unknown;
8
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type ExecutionEnvironmentResponseDtoAllowedConnectorsItem = {
7
+ [key: string]: unknown;
8
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type ExecutionEnvironmentResponseDtoAllowedKnowledgeScopesItem = {
7
+ [key: string]: unknown;
8
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export type ExecutionEnvironmentResponseDtoAllowedMountsItem = {
7
+ [key: string]: unknown;
8
+ };
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -4,7 +4,7 @@
4
4
  * OpenAPI spec version: 0.1.1
5
5
  */
6
6
  /**
7
- * Owning organization. `null` for kernel-seeded built-in environments (global); set for org-custom environments.
7
+ * Identity owner on catalogue reads; immutable publication owner on exact-authority reads. `null` denotes the global built-in publication.
8
8
  * @nullable
9
9
  */
10
10
  export type ExecutionEnvironmentResponseDtoOrgId = {
@@ -0,0 +1,16 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ export interface ImpactedOutputRouteConsumerDto {
7
+ ownerSpaceKey: string;
8
+ resourceKind: string;
9
+ resourceId: string;
10
+ revisionId: string;
11
+ /** @pattern ^[a-f0-9]{64}$ */
12
+ contentHash: string;
13
+ /** @minimum 0 */
14
+ depth: number;
15
+ followedIntentPaths: string[];
16
+ }
@@ -0,0 +1,7 @@
1
+ "use strict";
2
+ /**
3
+ * Generated by @xemahq/api-client-generator — do not edit manually.
4
+ * Authorization API
5
+ * OpenAPI spec version: 0.1.1
6
+ */
7
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Generated by @xemahq/api-client-generator — do not edit manually.
3
+ * Authorization API
4
+ * OpenAPI spec version: 0.1.1
5
+ */
6
+ import type { ImpactedOutputRouteConsumerDto } from './impactedOutputRouteConsumerDto.js';
7
+ export interface ImpactedOutputRouteConsumerDtoDataArrayEnvelope {
8
+ data: ImpactedOutputRouteConsumerDto[];
9
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -15,10 +15,12 @@ export * from './authorizationSuggestionKind';
15
15
  export * from './biomeExecutionTrustTier';
16
16
  export * from './biomePermissionProfile';
17
17
  export * from './callerKind';
18
+ export * from './capabilityEffectClass';
18
19
  export * from './capabilityGrantDto';
19
20
  export * from './capabilityGrantDtoDataEnvelope';
20
21
  export * from './capabilityGrantDtoPaginatedEnvelope';
21
22
  export * from './capabilityGrantRelation';
23
+ export * from './capabilityReach';
22
24
  export * from './capabilityRiskTier';
23
25
  export * from './createExecutionEnvironmentDto';
24
26
  export * from './createExecutionEnvironmentDtoAllowedCapabilitiesItem';
@@ -41,15 +43,30 @@ export * from './describeObjectsResponseDtoDataEnvelope';
41
43
  export * from './environmentCeilingSource';
42
44
  export * from './environmentsControllerFindBySlugParams';
43
45
  export * from './environmentsControllerListParams';
46
+ export * from './environmentsControllerReleaseHistoryParams';
47
+ export * from './environmentsControllerReleaseImpactParams';
44
48
  export * from './environmentsControllerRemoveParams';
49
+ export * from './environmentsControllerRollbackParams';
45
50
  export * from './environmentsControllerUpdateParams';
46
51
  export * from './errorDetailsDto';
47
52
  export * from './errorDetailsDtoDetails';
48
53
  export * from './errorPayloadDto';
49
54
  export * from './errorResponseDto';
55
+ export * from './exactResourceAuthorityDto';
56
+ export * from './exactResourceAuthorityDtoDataEnvelope';
57
+ export * from './exactResourceBindingDto';
50
58
  export * from './executionEnvironmentKind';
59
+ export * from './executionEnvironmentReleaseHistoryDto';
60
+ export * from './executionEnvironmentReleaseHistoryDtoDataArrayEnvelope';
61
+ export * from './executionEnvironmentReleaseHistoryDtoOperation';
62
+ export * from './executionEnvironmentReleaseImpactDto';
63
+ export * from './executionEnvironmentReleaseImpactDtoDataArrayEnvelope';
51
64
  export * from './executionEnvironmentResponseDto';
65
+ export * from './executionEnvironmentResponseDtoAllowedBiomesItem';
52
66
  export * from './executionEnvironmentResponseDtoAllowedCapabilitiesItem';
67
+ export * from './executionEnvironmentResponseDtoAllowedConnectorsItem';
68
+ export * from './executionEnvironmentResponseDtoAllowedKnowledgeScopesItem';
69
+ export * from './executionEnvironmentResponseDtoAllowedMountsItem';
53
70
  export * from './executionEnvironmentResponseDtoApprovalRulesItem';
54
71
  export * from './executionEnvironmentResponseDtoDataArrayEnvelope';
55
72
  export * from './executionEnvironmentResponseDtoDataEnvelope';
@@ -59,7 +76,10 @@ export * from './grantConstraintsDto';
59
76
  export * from './grantVersionResponseDto';
60
77
  export * from './grantVersionResponseDtoDataEnvelope';
61
78
  export * from './grantsControllerListParams';
79
+ export * from './impactedOutputRouteConsumerDto';
80
+ export * from './impactedOutputRouteConsumerDtoDataArrayEnvelope';
62
81
  export * from './listVisibleResourcesDto';
82
+ export * from './object';
63
83
  export * from './objectLifecycle';
64
84
  export * from './openFgaRelationshipDto';
65
85
  export * from './openFgaRelationshipDtoPaginatedEnvelope';
@@ -67,6 +87,21 @@ export * from './orgRole';
67
87
  export * from './orgRoleSyncDto';
68
88
  export * from './orgRoleSyncResultDto';
69
89
  export * from './orgRoleSyncResultDtoDataEnvelope';
90
+ export * from './outputRouteAuthorityDto';
91
+ export * from './outputRouteAuthorityDtoAllowedOutputSchema';
92
+ export * from './outputRouteAuthorityDtoDataEnvelope';
93
+ export * from './outputRouteDestinationKind';
94
+ export * from './outputRoutePublicationRequestDto';
95
+ export * from './outputRoutePublicationRequestDtoDataEnvelope';
96
+ export * from './outputRouteReleaseHistoryDto';
97
+ export * from './outputRouteReleaseHistoryDtoDataArrayEnvelope';
98
+ export * from './outputRouteReleaseHistoryDtoOperation';
99
+ export * from './outputRouteReleaseRequestDto';
100
+ export * from './outputRouteReleaseRequestDtoDataEnvelope';
101
+ export * from './outputRouteReleaseRequestDtoStatus';
102
+ export * from './outputRouteRevisionDto';
103
+ export * from './outputRouteRevisionDtoAllowedOutputSchema';
104
+ export * from './outputRouteRevisionsControllerReleaseHistoryParams';
70
105
  export * from './paginationMeta';
71
106
  export * from './policyActingForDto';
72
107
  export * from './policyBiomeDto';
@@ -89,6 +124,7 @@ export * from './policyRouteHintDto';
89
124
  export * from './policyRouteHintDtoRequiredRunnerLabels';
90
125
  export * from './policySpaceRefDto';
91
126
  export * from './policySubjectRefDto';
127
+ export * from './previewOutputRouteImpactDto';
92
128
  export * from './profilePolicyTemplateDto';
93
129
  export * from './profilePolicyTemplateDtoDataArrayEnvelope';
94
130
  export * from './profilePolicyTemplateDtoNotes';
@@ -97,15 +133,27 @@ export * from './provisionAgentResultDto';
97
133
  export * from './provisionAgentResultDtoDataEnvelope';
98
134
  export * from './provisionedCapabilityDto';
99
135
  export * from './registerResourceOwnershipDto';
136
+ export * from './registerResourceRevisionDto';
137
+ export * from './registeredResourceRevisionDto';
138
+ export * from './registeredResourceRevisionDtoDataEnvelope';
100
139
  export * from './relationshipsControllerListParams';
101
140
  export * from './removeResourceShareDto';
102
141
  export * from './replaceResourceOwnershipDto';
142
+ export * from './requestOutputRouteRetirementDto';
143
+ export * from './requestOutputRouteRevisionReleaseDto';
144
+ export * from './requestOutputRouteRevisionReleaseDtoAllowedOutputSchema';
145
+ export * from './requestOutputRouteRollbackDto';
146
+ export * from './resolveExactOutputRouteDto';
147
+ export * from './resolveExactResourceRevisionDto';
148
+ export * from './resolveOutputRouteChannelDto';
103
149
  export * from './resourceManagedBy';
104
150
  export * from './resourceOwnershipDto';
105
151
  export * from './resourceOwnershipDtoDataEnvelope';
106
152
  export * from './resourceOwnershipEntryDto';
107
153
  export * from './resourceOwnershipReadDto';
108
154
  export * from './resourceOwnershipReadDtoDataEnvelope';
155
+ export * from './resourceShareRefDto';
156
+ export * from './resourceSubjectAccessResult';
109
157
  export * from './resourceSubjectRefDto';
110
158
  export * from './resourceVisibilityPattern';
111
159
  export * from './roleAssignmentDto';
@@ -118,6 +166,7 @@ export * from './roleGrantDto';
118
166
  export * from './roleGrantDtoDataArrayEnvelope';
119
167
  export * from './roleGrantDtoDataEnvelope';
120
168
  export * from './rolesControllerListParams';
169
+ export * from './rollbackExecutionEnvironmentDto';
121
170
  export * from './runnerKind';
122
171
  export * from './sessionParticipantRole';
123
172
  export * from './spaceKind';